$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: CSUw7UB0BTVgWGOeWu0qf2w7Xiwy2y/+HZ5IBEWlEb0= Subject key identifier: 96:72:98:27:18:10:EA:A8:D1:9C:26:EC:CB:10:B0:6A:02:C3:5B:4B Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 3483 Signing time: Mon 28 Apr 2025 14:23:16 +0000 Manifest this update: Mon 28 Apr 2025 14:23:15 +0000 Manifest next update: Mon 05 May 2025 14:23:15 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: +o4D+ynLG6W+UqqRgEcXR+2MWrWoA/dIfyu4oxd0AWE=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 6tW1p4KIiGaRaePQd+Ni/gW4xsAg3egSs1rK2j0NTYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Apr 28 14:23:15 2025 GMT Not After : May 5 14:23:15 2025 GMT Subject: CN=680f8f54-e0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5e:5b:4d:63:13:3c:58:ee:5b:20:a2:2b:dc: 4c:68:1c:a1:78:5d:ba:0b:dc:39:99:c6:fc:a0:1b: 37:ca:b8:0d:07:41:2e:1d:48:77:13:28:22:f0:86: 0d:b9:68:08:ae:a1:33:5d:49:47:0a:54:9c:ab:5a: 07:82:20:33:62:1b:84:05:05:94:0b:be:56:3e:a6: 57:fb:e6:46:c9:8f:48:05:a2:02:e3:0d:48:cf:d9: 73:02:51:11:3f:7e:01:30:59:39:e2:8b:b0:3e:f5: d7:5a:7f:33:7f:16:60:25:bd:14:29:ca:89:98:91: 97:13:6d:29:0b:c0:49:b7:fc:92:0b:55:34:88:4e: e9:d2:d9:ef:8a:ab:93:8c:75:78:6c:6f:a8:85:b2: 04:79:41:f4:f7:7c:91:23:95:b8:e1:b7:25:aa:18: 51:9d:b9:2c:56:61:41:cb:3c:40:e5:95:0c:cf:49: ce:bc:17:ab:a5:36:3e:1a:c4:90:20:9d:87:1c:7d: 4c:95:19:c9:91:4c:4d:7d:d8:92:b3:59:79:5f:fa: b5:94:f7:1b:be:e6:ff:0f:41:8a:96:d0:38:3d:3b: 06:ee:45:29:dd:79:0a:56:11:d7:3d:62:8f:f8:d1: 84:5c:4e:e2:63:fb:8f:68:42:91:ac:5a:bd:7e:f1: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:72:98:27:18:10:EA:A8:D1:9C:26:EC:CB:10:B0:6A:02:C3:5B:4B X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:4e:56:3c:41:96:70:d8:76:83:15:76:a9:6b:b4:ce:22:19: 51:ea:7e:c0:e7:bf:f2:03:49:8f:17:7d:a6:6f:06:44:06:99: 37:ab:43:7d:a5:ce:19:1c:a2:96:42:2d:51:3b:60:cd:18:4c: 3b:7b:7f:ac:32:28:95:5f:ac:6c:72:cb:b0:52:e0:83:7c:44: 7d:7f:6b:70:7b:9d:ca:e6:97:22:15:88:07:3b:83:cb:6a:f4: f9:02:54:1a:b4:b6:17:b7:94:35:fb:ad:f3:f7:7c:00:f9:8c: cf:ed:05:3e:7f:60:4e:a0:e8:ed:73:00:77:69:c2:3e:01:1b: dd:d6:08:a6:d9:4d:f9:31:1f:9d:53:f8:66:ec:0d:82:56:3a: ef:7c:c6:1d:56:a5:20:0d:dc:9b:fa:39:49:8b:4e:46:d9:24: 3b:3e:b8:49:b0:25:93:78:13:09:51:f0:f2:ae:be:79:cd:22: c8:be:da:67:25:94:d9:c1:0c:34:74:18:af:47:23:36:d6:58: f8:d0:63:81:83:47:3b:28:ff:4f:e5:f0:21:8b:70:57:70:75: 97:c6:d3:31:bc:ca:3b:af:e9:ea:18:20:a7:7e:54:55:35:00: 98:8f:18:10:99:08:6c:29:cf:4d:d8:18:db:d0:d7:38:d8:04: 27:5c:c0:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUwNDI4MTQyMzE1WhcNMjUwNTA1MTQyMzE1WjAYMRYwFAYD VQQDEw02ODBmOGY1NC1lMGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9V5bTWMTPFjuWyCiK9xMaByheF26C9w5mcb8oBs3yrgNB0EuHUh3Eygi8IYN uWgIrqEzXUlHClScq1oHgiAzYhuEBQWUC75WPqZX++ZGyY9IBaIC4w1Iz9lzAlER P34BMFk54ouwPvXXWn8zfxZgJb0UKcqJmJGXE20pC8BJt/ySC1U0iE7p0tnviquT jHV4bG+ohbIEeUH093yRI5W44bclqhhRnbksVmFByzxA5ZUMz0nOvBerpTY+GsSQ IJ2HHH1MlRnJkUxNfdiSs1l5X/q1lPcbvub/D0GKltA4PTsG7kUp3XkKVhHXPWKP +NGEXE7iY/uPaEKRrFq9fvHCcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZymCcY EOqo0Zwm7MsQsGoCw1tLMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDATlY8QZZw2HaDFXapa7TOIhlR6n7A57/yA0mPF32mbwZEBpk3q0N9 pc4ZHKKWQi1RO2DNGEw7e3+sMiiVX6xscsuwUuCDfER9f2twe53K5pciFYgHO4PL avT5AlQatLYXt5Q1+63z93wA+YzP7QU+f2BOoOjtcwB3acI+ARvd1gim2U35MR+d U/hm7A2CVjrvfMYdVqUgDdyb+jlJi05G2SQ7PrhJsCWTeBMJUfDyrr55zSLIvtpn JZTZwQw0dBivRyM21lj40GOBg0c7KP9P5fAhi3BXcHWXxtMxvMo7r+nqGCCnflRV NQCYjxgQmQhsKc9N2Bjb0Nc42AQnXMC5 -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:09 2025 by rpki-client on console.sobornost.net